IMGPROXY_IGNORE_SSL_VERIFICATION option

config.go

@@ -98,6 +98,8 @@ type config struct {
 
 	AllowOrigin string
 
+	IgnoreSslVerification bool
+
 	LocalFileSystemRoot string
 
 	ETagEnabled bool
@@ -112,6 +114,7 @@ var conf = config{
 	DownloadTimeout:       5,
 	Concurrency:           runtime.NumCPU() * 2,
 	TTL:                   3600,
+	IgnoreSslVerification: false,
 	MaxSrcDimension:       8192,
 	MaxSrcResolution:      16800000,
 	Quality:               80,
@@ -161,6 +164,8 @@ func init() {
 
 	strEnvConfig(&conf.AllowOrigin, "IMGPROXY_ALLOW_ORIGIN")
 
+	boolEnvConfig(&conf.IgnoreSslVerification, "IMGPROXY_IGNORE_SSL_VERIFICATION")
+
 	strEnvConfig(&conf.LocalFileSystemRoot, "IMGPROXY_LOCAL_FILESYSTEM_ROOT")
 
 	boolEnvConfig(&conf.ETagEnabled, "IMGPROXY_USE_ETAG")
@@ -222,6 +227,10 @@ func init() {
 		log.Fatalf("GZip compression can't be greater than 9, now - %d\n", conf.GZipCompression)
 	}
 
+	if conf.IgnoreSslVerification {
+		log.Println("Ignoring SSL verification is very unsafe. Hope you know what you're doing")
+	}
+
 	if conf.LocalFileSystemRoot != "" {
 		stat, err := os.Stat(conf.LocalFileSystemRoot)
 		if err != nil {

download.go

@@ -3,6 +3,7 @@ package main
 import (
 	"bufio"
 	"bytes"
+	"crypto/tls"
 	"errors"
 	"fmt"
 	"image"
@@ -59,9 +60,15 @@ func initDownloading() {
 	transport := &http.Transport{
 		Proxy: http.ProxyFromEnvironment,
 	}
+
+	if conf.IgnoreSslVerification {
+		transport.TLSClientConfig = &tls.Config{InsecureSkipVerify: true}
+	}
+
 	if conf.LocalFileSystemRoot != "" {
 		transport.RegisterProtocol("local", http.NewFileTransport(http.Dir(conf.LocalFileSystemRoot)))
 	}
+
 	downloadClient = &http.Client{
 		Timeout:   time.Duration(conf.DownloadTimeout) * time.Second,
 		Transport: transport,